$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: ybbdobbe0/5nHhhT1b7R/BhgVaAVwShHZObsJBmUH1M= Subject key identifier: 4B:24:3A:38:8D:6C:26:87:B2:0A:53:A2:37:F5:76:40:41:D3:01:CA Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 0482 Signing time: Sun 08 Jun 2025 23:41:15 +0000 Manifest this update: Sun 08 Jun 2025 23:41:14 +0000 Manifest next update: Sun 15 Jun 2025 23:41:14 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: wBdsmX+uOrW/Icz6pwfvP1GhPQsy+p+FJ5flja4Vl1Q=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: ep6/NjkJNZJDWkEDthfqanztHTbJuX44L/+Atn4MZWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Jun 8 23:41:14 2025 GMT Not After : Jun 15 23:41:14 2025 GMT Subject: CN=68461f9b-cc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:65:6d:17:d2:1f:1a:1f:54:2d:8e:aa:a5: f5:8d:09:c2:13:73:0a:f3:2f:e4:6f:19:14:65:ee: 61:4b:d8:31:df:68:61:1a:1f:47:0a:c4:1e:61:75: 3e:d6:68:3c:ce:71:d0:dd:ff:c0:74:99:13:81:e6: 7d:38:d6:d3:af:c4:70:1e:23:da:61:19:8b:ef:4d: 16:26:30:40:c6:b0:d3:26:f7:fb:9f:28:07:95:16: f2:bb:67:4f:7f:ad:45:45:2f:97:5b:6d:fe:6e:f6: 25:29:d0:f2:43:05:e0:02:30:ee:ad:8c:54:88:9d: 97:27:1c:b1:7a:52:7b:70:98:30:09:da:65:06:32: 94:d1:16:fb:67:0b:11:ee:6c:a2:9e:46:a0:08:46: 36:36:9a:61:b3:3c:d0:b1:19:ec:ed:11:df:e6:8d: 1c:90:96:8b:89:4b:d9:1e:83:55:a1:94:77:b9:ff: 44:eb:15:04:8a:0e:c0:d2:34:4e:40:f5:99:a7:ae: 62:4d:ab:90:76:b8:7d:04:be:f5:79:a1:81:dc:8b: fe:65:ad:fd:74:53:48:5e:c0:a0:eb:50:49:7b:6b: f4:ff:cc:bc:ce:57:7e:a7:58:11:84:22:e6:a4:10: 78:65:40:91:ac:48:32:39:bd:b2:9d:52:2b:d3:fd: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:24:3A:38:8D:6C:26:87:B2:0A:53:A2:37:F5:76:40:41:D3:01:CA X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f7:81:12:69:e3:63:1e:23:ca:05:b5:cc:eb:78:a2:db:39: 6a:f8:a9:23:eb:ba:69:f4:76:7b:2c:c2:c3:c0:c4:1d:05:e9: 1f:f0:68:df:81:9a:34:45:5a:d9:1b:a6:18:d9:dd:7e:e9:89: 55:e9:9b:a7:fa:5a:ad:0d:e7:e7:15:26:c1:74:2b:2b:18:a6: ad:59:fc:5b:dd:1a:1e:78:f4:16:ed:84:86:3a:12:b9:a2:f2: 66:65:dc:0b:9c:1a:d7:b2:31:6b:25:9f:1b:77:14:de:22:8a: 7f:d5:d2:ff:b7:8c:99:6f:64:25:84:ca:9c:28:79:a0:13:38: 63:07:ae:5c:37:4a:2c:8c:c8:ff:07:14:96:1d:57:99:47:20: fa:5a:10:d6:c4:67:dc:b5:11:64:dc:5d:d5:cc:93:19:8e:e0: 6a:f3:a2:e7:d8:86:f7:74:3a:09:d9:5d:9e:98:36:8e:6a:20: 33:89:cd:be:8b:40:f9:85:80:d4:70:e6:60:bc:76:e3:e2:87: 78:1d:e7:77:b2:8c:95:dd:db:70:69:d7:55:b3:4b:2e:a3:2d: 60:dc:a3:ca:89:0c:2b:5f:29:04:90:1b:59:eb:6f:c0:df:32: 52:14:ca:f1:82:a3:01:db:ce:4a:c3:1d:6a:fd:b0:a2:cd:2d: 96:ab:71:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUwNjA4MjM0MTE0WhcNMjUwNjE1MjM0MTE0WjAYMRYwFAYD VQQDEw02ODQ2MWY5Yi1jYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MBlbRfSHxofVC2OqqX1jQnCE3MK8y/kbxkUZe5hS9gx32hhGh9HCsQeYXU+ 1mg8znHQ3f/AdJkTgeZ9ONbTr8RwHiPaYRmL700WJjBAxrDTJvf7nygHlRbyu2dP f61FRS+XW23+bvYlKdDyQwXgAjDurYxUiJ2XJxyxelJ7cJgwCdplBjKU0Rb7ZwsR 7myinkagCEY2NpphszzQsRns7RHf5o0ckJaLiUvZHoNVoZR3uf9E6xUEig7A0jRO QPWZp65iTauQdrh9BL71eaGB3Iv+Za39dFNIXsCg61BJe2v0/8y8zld+p1gRhCLm pBB4ZUCRrEgyOb2ynVIr0/0aDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEskOjiN bCaHsgpTojf1dkBB0wHKMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI94ESaeNjHiPKBbXM63ii2zlq+Kkj67pp9HZ7LMLDwMQdBekf8Gjf gZo0RVrZG6YY2d1+6YlV6Zun+lqtDefnFSbBdCsrGKatWfxb3RoeePQW7YSGOhK5 ovJmZdwLnBrXsjFrJZ8bdxTeIop/1dL/t4yZb2QlhMqcKHmgEzhjB65cN0osjMj/ BxSWHVeZRyD6WhDWxGfctRFk3F3VzJMZjuBq86Ln2Ib3dDoJ2V2emDaOaiAzic2+ i0D5hYDUcOZgvHbj4od4Hed3soyV3dtwaddVs0suoy1g3KPKiQwrXykEkBtZ62/A 3zJSFMrxgqMB285Kwx1q/bCizS2Wq3Fo -----END CERTIFICATE-----Generated at Tue Jun 10 00:52:19 2025 by rpki-client